Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a3a2f33332d3333203d3e20323637323930.roa
File:                     323830343a346233343a3a2f33332d3333203d3e20323637323930.roa (raw, json)
Hash identifier:          h1JZr4C9Wz4i4Am0HBWSKBdOl1cZzmYQMEU6akXFLLg=
Subject key identifier:   A6:C2:67:1C:F9:A2:A2:4F:F0:30:09:0D:E1:2C:78:96:D1:8A:7F:6F
Certificate issuer:       /CN=4C90344E384710E55DBA9D811B8DB9699219721E
Certificate serial:       15459562B0A0BAA40BE46DA02CB0BB3F1DC8ED4C
Authority key identifier: 4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a3a2f33332d3333203d3e20323637323930.roa
Signing time:             Wed 06 Dec 2023 21:00:00 +0000
ROA not before:           Wed 06 Dec 2023 20:55:00 +0000
ROA not after:            Wed 04 Dec 2024 21:00:00 +0000
asID:                     267290
IP address blocks:        2804:4b34::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:45:95:62:b0:a0:ba:a4:0b:e4:6d:a0:2c:b0:bb:3f:1d:c8:ed:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C90344E384710E55DBA9D811B8DB9699219721E
        Validity
            Not Before: Dec  6 20:55:00 2023 GMT
            Not After : Dec  4 21:00:00 2024 GMT
        Subject: CN=A6C2671CF9A2A24FF030090DE12C7896D18A7F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:46:c5:f8:2a:6d:86:42:23:d2:37:4a:f9:
                    cc:a9:aa:e7:ea:f7:a0:bd:e9:30:30:4c:bc:18:e6:
                    56:a6:2a:1a:a3:4c:d4:86:73:c7:58:ad:67:fd:61:
                    34:1f:2c:68:a2:e6:e9:4d:f4:69:18:ff:cc:30:48:
                    54:d8:94:4b:22:5c:a9:1f:48:12:f6:03:df:21:30:
                    c9:fb:8b:e6:36:06:12:62:97:10:ad:5b:ac:8c:e0:
                    84:6b:1a:70:74:1e:08:1a:4d:77:4b:19:ed:88:8a:
                    4a:ac:63:d8:a4:2b:83:db:6d:2a:3e:22:e9:fd:cd:
                    a2:67:c6:60:f7:31:c8:94:e9:95:99:c1:7c:d2:4e:
                    f1:c3:ac:d9:70:a6:6e:d6:57:a9:98:d5:9f:1b:d0:
                    9f:04:31:35:14:fa:a8:77:3d:65:02:79:4f:e9:43:
                    48:29:f3:51:bd:b0:dc:9f:de:4e:34:5c:e4:a3:b1:
                    39:bb:5f:24:89:8c:b8:c4:fa:c8:71:fe:28:60:f7:
                    cd:91:3f:7c:31:26:07:9e:3a:31:24:2d:ac:82:79:
                    e4:aa:f6:2d:02:1a:0a:ee:a0:49:a8:65:ef:08:ad:
                    d1:f2:d4:b6:c8:c2:30:80:28:8e:78:1b:67:c9:1e:
                    09:9e:b4:9b:5c:1f:11:73:28:98:89:46:e2:ad:f3:
                    4c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C2:67:1C:F9:A2:A2:4F:F0:30:09:0D:E1:2C:78:96:D1:8A:7F:6F
            X509v3 Authority Key Identifier:
                keyid:4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a3a2f33332d3333203d3e20323637323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b34::/33

    Signature Algorithm: sha256WithRSAEncryption
         19:50:0b:b1:fd:22:bd:84:6e:75:32:fa:cc:79:2d:37:f3:eb:
         1b:57:3d:65:42:26:e7:f2:62:c9:86:7f:d9:29:fd:ce:bf:34:
         f2:c6:36:e8:73:5c:e4:ba:af:2c:bf:5b:27:cc:a5:c9:ad:13:
         67:da:92:e6:b5:e6:de:00:93:87:1f:ee:75:96:5f:9c:d3:22:
         ce:e0:b6:a9:8a:5d:16:63:3f:f5:87:5d:49:3f:16:61:21:85:
         42:80:90:9a:9e:d5:f5:fe:a7:fd:4a:3a:a8:19:20:da:1d:6e:
         ba:e1:cf:0c:67:00:97:d7:b2:e1:dd:67:70:aa:59:4a:2b:05:
         04:ec:b0:fe:f8:e1:73:8a:7d:29:23:0a:c2:36:b3:f5:08:70:
         1d:e1:a4:fc:54:1f:42:55:9b:dd:46:b0:08:a0:e6:50:10:d7:
         f3:c1:ef:3a:9c:e4:90:62:76:0e:8e:06:29:5f:51:4a:5e:d1:
         ed:dd:4b:28:c1:51:a7:14:9a:71:06:2a:b0:a6:9a:29:b7:b0:
         f4:b1:da:10:71:33:f8:b4:72:94:1a:0b:5f:80:e8:a2:67:35:
         b3:5e:2c:7d:2d:83:7e:be:9b:79:96:2d:a5:d1:96:1e:2c:03:
         4a:3f:cd:c2:9d:b0:8c:fa:ca:ac:b3:67:e4:df:16:7f:4c:e8:
         d6:6a:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org